RSS
Threat Research
Attack Tools
featured
Remote access
Velociraptor
Visual Studio Code
Velociraptor incident response tool abused for remote access
August 26, 2025
Security Operations
Annual Threat Report
Dual-use tools
malware trends 2024
Sophos Annual Threat Report appendix: Most frequently encountered malware and abused software
April 16, 2025
active adversary
Active Adversary Report
Artifacts
cobalt strike
Cryptomining
cyberattacks
cyberthreats
dwell time
Exploit
initial access broker
malware delivery system
MITRE
ProxyLogon
ProxyShell
Ransomware
ransomware as a service
Sophos Rapid Response
vulnerability
The Active Adversary Playbook 2022
June 7, 2022
SophosLabs Uncut
Defense evasion
LockBit Ransomware
Malicious Google documents
Powershell
Powershell Empire
LockBit uses automated attack tools to identify tasty targets
October 21, 2020